Build status:
Doorman is an RFC-compliant implementation of the TOTP (Time-Based One-Time Passsword, RFC 6238) algorithm, which is commonly used for Two Factor Authentication.
A wrapper for the Google Authenticator - a key manager and code generator, which can be downloaded for free, is also available. It also works for other 3rd party code generators, that use the TOTP algorithm.
You need at least a 64-bit version of PHP 5.4 or HHVM.
Use Composer CLI:
php composer.phar require battlerattle/doorman:1.0.*@dev
Or add battlerattle/doorman to your composer.json:
"require": {
"battlerattle/doorman": "1.0.*@dev"
},
This is a pretty basic example
use BattleRattle\Doorman\Authentication\TimeBasedAuthenticator;
// get the code from user input
$code = '...';
// the user's secret key
$key = '...';
$authenticator = new TimeBasedAuthenticator();
$result = $authenticator->authenticate($key, $code);
if ($result) {
echo 'Welcome, you successfully logged in';
} else {
echo 'Nope, please try again';
}In this example we use the Google Authenticator, which uses base32-encoded keys, that will be decoded internally.
use BattleRattle\Doorman\Authentication\GoogleAuthenticator;
$code = '...';
$key = '...';
$authenticator = new GoogleAuthenticator();
$result = $authenticator->authenticate($key, $code);
if ($result) {
echo 'Welcome, you successfully logged in';
} else {
echo 'Nope, please try again';
}This generator creates "Google Authenticator"-compliant keys:
use BattleRattle\Doorman\KeyGeneration\GoogleAuthKeyGenerator;
$keyGenerator = new GoogleAuthKeyGenerator;
$key = $keyGenerator->generateKey();
// it's good practice to split the key into chunks of 4 characters for better readability
$formattedKey = implode(' ', str_split($key, 4));
echo 'Add this key to your authenticator: ' . $formattedKey;- Better Security with Two Factor Authentication - presentation about functionality of Two Factor Authentication
- RFC 6238 - official description of the "Time-Based One-Time Password" algorithm
- Google Authenticator - authenticator for Android / iPhone / BlackBerry
- Duo Mobile - authenticator for Android / iPhone